In the Claims 

Claims remaining in the application are as follows: 

1 . (Currently amended) A method of managing traffic in a first set of nodes of a 
computer network having first set of nodes and a second set of nodes comprising: 

determining a source associated with an amount of network traffic over the 
first set of nodes which exceeds a threshold, the source being outside 
a group of network elements assigned to the first set of nodes; and 
automatically displaying an indication of the source in response to 

determining the source, wherein determining the source includes: 
determining top talker sources over the first VLAN and a the 
second VLAN; 

determining VLAN identifiers for the top talker sources; and 
displaying the indication if the VLAN identifier of at least one of 

the top talker sources is not the same as the VLAN 

identifier of a VLAN being tested. 

2. (Canceled) 

3. (Original) The method of claim 1, wherein the indication is a user name 
associated with the source. 

4. (Previously presented) The method of claim 1 , wherein the source is assigned to 
the second VLAN, the method comprising: 

reassigning the source to the first VLAN in response to determining the 
source. 

5. (Original) The method of claim 4, wherein the source is automatically reassigned 

6. (Previously presented) The method of claim 1 , wherein traffic data is obtained 
from the first VLAN using a network management protocol. 

7. (Previously presented) The method of claim 6, wherein the traffic data is 
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obtained using a remote monitoring protocol. 

8. (Previously presented) The method of claim 1, wherein the determination of the 
source includes determining the top sources of traffic on the first VLAN. 

9. (Previously presented) A computer for managing traffic in a first set of nodes of 
a computer network having a first set of nodes and a second set of nodes, the 
computer comprising: 

a display; and 

a processor configured to: 

determine a source associated with an amount of network traffic over a 

first set of nodes which exceeds a threshold, 
determine whether the source is outside a group of network elements 
assigned to the first set of nodes by checking top talker data to 
determine which of a plurality of top talker sources are not from 
the first set of nodes, the processor configured to automatically 
send to the display an indication of the source in response to 
determining the source, wherein the first set of nodes is a first 
VLAN and the second set of nodes is a second VLAN. 

10. (Canceled) 

1 1 . (Previously presented) The computer of claim 9, wherein the indication is a 
user name associated with the source. 

12. (Previously presented) The computer of claim 9, wherein the source is 
assigned to the second VLAN, and wherein the processor is configured to reassign 
the source to the first VLAN in response to determining the source. 

13. (Previously presented) The computer of claim 9, wherein the processor is 
configured to obtain traffic data from the first VLAN using a network management 
protocol. 

14. (Previously presented) The computer of claim 13, wherein the processor is 
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configured to 

obtain traffic data using a remote monitoring protocol. 

15. (Previously presented) The computer of claim 9, wherein the processor is 
configured to 

identify any sources of traffic which are associated with a given threshold of traffic 
on the first VLAN. 

1 6. (Currently amended) A system for managing traffic in a first set of nodes of a 
computer network comprising: 

a first set of nodes; and 

a computer coupled with the first set of nodes and configured to determine a 
source associated with an amount of network traffic over the first set of 
nodes which exceeds a threshold, and to further determine whether 
the source is outside a group of network elements assigned to the first 
set of nodes by accessing source identifiers of top talker sources from 
management data, the computer configured to automatically display 
an indication of the source in response to determining the source, 
wherein the first set of nodes is a first VLAN and a the second set of 
nodes is a second VLAN. 

17. (Canceled) 

18. (Original) The system of claim 16, wherein the indication is a user name 
associated with the source. 

19. (Currently amended) The system of claim 16, wherein the source is assigned 
to the second VLAN within the system, and wherein the computer is configured to 
reassign the them source to the first VLAN in response to determining the source. 

20. (Previously presented) The system of claim 16, wherein the computer is 
configured to obtain traffic data from the first VLAN using a network management 
protocol. 
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21 . (Previously presented) The system of claim 20, wherein the computer is 
configured to obtain traffic data from the first VLAN using a remote monitoring 
protocol. 

22. (Previously presented) The system of claim 16, wherein the computer is 
configured to identify any sources of traffic which are associated with a given 
threshold of traffic on the first VLAN. 

23. (Currently amended) A computer-readable medium containing a program 
executable by a processor for managing traffic in a first set of nodes of a computer 
network having a first set of nodes and a second set of nodes, the program 
comprising: 

determining a source associated with an amount of network traffic over the 

first set of nodes which exceeds a threshold, 
determining whether the source is outside a group of network elements 

assigned to the first set of nodes based on whether source identifiers 

for top talker sources are the same as a source identifier for the first 

set of nodes; and 
automatically displaying an indication of the source in response to 

determining the source, wherein the first set of nodes is a first VLAN 

and the second set of nodes is a second VLAN. 

24. (Canceled) 

25. (Original) The computer-readable medium containing a program of claim 23, 
wherein the indication is a user name associated with the source. 

26. (Previously presented) The computer-readable medium containing a program 
of claim 23, wherein the source is assigned to the second VLAN, the method 
comprising: reassigning the source to the first VLAN in response to determining the 
source. 

27. (Original) The computer-readable medium containing a program of claim 26, 
wherein the source is automatically reassigned. 
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28. (Previously presented) The computer-readable medium containing a program 
of claim 23, wherein traffic data is obtained from the first VLAN using a network 
management protocol. 

29. (Previously presented) The computer-readable medium containing a program 
of claim 28, wherein the traffic data is obtained using a remote monitoring protocol. 

30. (Previously presented) The computer-readable medium containing a program 
of claim 23, wherein the determination of the source includes identifying any 
sources of traffic which are associated with a given threshold of traffic on the first 
VLAN. 
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